$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: TY8mg/FFXCnwl7XgO3CHLshNDDV40rw3lRhlcKxFguY= Subject key identifier: A4:AB:51:B5:8E:85:4A:AA:E0:7D:6E:41:B2:AD:E9:4E:07:7E:A2:07 Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 53 Signing time: Tue 03 Jun 2025 07:04:46 +0000 Manifest this update: Tue 03 Jun 2025 07:04:46 +0000 Manifest next update: Tue 10 Jun 2025 07:04:46 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: vdWSSQVVtbPqHRxHt7NfrSlo+MFIGvprEeBWhUuVo0Q=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Jun 3 07:04:46 2025 GMT Not After : Jun 10 07:04:46 2025 GMT Subject: CN=683e9e8e-c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:e6:1b:28:2f:50:b7:6d:b2:52:70:28:dd: cf:31:be:c6:05:88:0a:fa:af:99:1b:41:53:dd:e7: f8:a8:cc:44:c5:13:8f:b6:b2:11:5c:39:2e:94:86: 2c:81:b9:ab:53:be:f1:0d:a7:38:4c:55:a2:52:85: ce:3e:1b:d8:72:6b:a3:f5:37:72:f7:75:df:f4:de: 3f:c0:c9:f5:80:a9:cc:33:51:05:bf:ca:33:9f:56: 07:32:c1:1a:ac:80:c5:5e:3e:6b:d6:4a:08:0f:14: 62:5a:ef:e0:26:71:ea:b2:27:ef:86:d5:b9:5e:8c: f0:0d:fc:c7:ad:57:eb:fd:e6:ad:33:62:50:28:00: 2b:c6:df:d7:9b:36:d2:79:6f:59:bd:13:67:64:e2: a7:1a:b4:5e:d4:50:72:4e:0b:d7:df:4d:bc:b7:02: 88:cf:8c:95:06:13:22:26:ba:fa:5b:21:da:57:fa: ba:97:c3:f1:f6:dc:a2:0f:60:0a:e4:8d:44:c5:50: 9b:98:69:d4:c0:a6:2f:3d:4d:9b:c7:4b:0c:83:e8: 83:55:90:1f:3f:f0:ec:55:4e:c7:0f:90:a0:bb:d0: 19:19:fb:e5:71:7e:15:a9:1e:11:a5:20:f8:db:f6: 36:1b:3c:eb:03:c1:c3:d6:98:1a:46:b6:90:c7:c8: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AB:51:B5:8E:85:4A:AA:E0:7D:6E:41:B2:AD:E9:4E:07:7E:A2:07 X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:99:8a:7c:49:64:1b:57:08:aa:d0:0a:4b:16:d0:10:0c:a3: f7:db:4a:1d:38:50:9b:0b:ca:fe:df:6f:65:78:30:83:39:da: ce:7a:81:86:ce:20:1b:83:4d:f9:f0:33:eb:04:80:93:1f:36: f0:e9:43:2a:42:0d:98:c1:e6:45:0e:2a:da:1d:18:12:e8:72: 1b:d0:54:92:59:53:61:0b:b0:ee:30:fd:ef:bb:ae:22:33:42: d0:fd:a6:2d:40:b2:17:e7:1f:0f:0c:0b:7a:1c:b2:14:ba:23: 42:cc:5a:5d:40:d9:55:2f:39:d4:65:11:56:f5:ca:91:30:4d: ce:e7:2e:97:8e:42:f8:bd:c1:ce:94:4c:4e:dc:01:03:92:a5: 91:cf:21:b0:3f:64:32:5a:b8:49:dc:23:dd:8e:3f:67:35:0a: af:eb:5e:1b:75:88:07:52:bb:a8:3f:a2:17:8a:31:81:1c:65: 0f:aa:79:e7:4e:d2:0e:dd:07:83:f3:4a:2c:f8:92:a3:77:28: c7:1c:c7:16:4e:fd:af:ee:bf:2c:36:4d:f3:03:c4:06:72:a7: 49:52:d6:cb:fd:e1:ba:78:87:03:53:ac:86:aa:d7:f3:c6:42: bc:36:b1:bf:e4:ba:7c:c1:89:00:a8:48:15:dd:56:88:7b:52: cc:e9:b6:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTA2MDMwNzA0NDZaFw0yNTA2MTAwNzA0NDZaMBgxFjAUBgNV BAMTDTY4M2U5ZThlLWMwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa7eYbKC9Qt22yUnAo3c8xvsYFiAr6r5kbQVPd5/iozETFE4+2shFcOS6UhiyB uatTvvENpzhMVaJShc4+G9hya6P1N3L3dd/03j/AyfWAqcwzUQW/yjOfVgcywRqs gMVePmvWSggPFGJa7+AmceqyJ++G1blejPAN/MetV+v95q0zYlAoACvG39ebNtJ5 b1m9E2dk4qcatF7UUHJOC9ffTby3AojPjJUGEyImuvpbIdpX+rqXw/H23KIPYArk jUTFUJuYadTApi89TZvHSwyD6INVkB8/8OxVTscPkKC70BkZ++VxfhWpHhGlIPjb 9jYbPOsDwcPWmBpGtpDHyKp1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpKtRtY6F SqrgfW5Bsq3pTgd+ogcwHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACyZinxJZBtXCKrQCksW0BAMo/fbSh04UJsLyv7fb2V4MIM52s56gYbO IBuDTfnwM+sEgJMfNvDpQypCDZjB5kUOKtodGBLochvQVJJZU2ELsO4w/e+7riIz QtD9pi1AshfnHw8MC3ocshS6I0LMWl1A2VUvOdRlEVb1ypEwTc7nLpeOQvi9wc6U TE7cAQOSpZHPIbA/ZDJauEncI92OP2c1Cq/rXht1iAdSu6g/oheKMYEcZQ+qeedO 0g7dB4PzSiz4kqN3KMccxxZO/a/uvyw2TfMDxAZyp0lS1sv94bp4hwNTrIaq1/PG Qrw2sb/kunzBiQCoSBXdVoh7UszptgM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:51 2025 by rpki-client